Maximise your Avios, air miles and hotel points

MIRACLE! The British Airways On Business website is back after 16 months

Links on Head for Points may support the site by paying a commission.  See here for all partner links.

Well, miracles can happen. Someone tell Rishi he may still have a chance!

Just 16 months after the website was (allegedly) hacked, British Airways On Business is back online.

You can log in to your account here.

British Airways On Business website is active again

There are two important things you need to know:

  • you cannot log-in until you do ‘Forgot your password?’ and do a password reset
  • you cannot access the website without using an authenticator app on your mobile phone

If you don’t know what an authenticator app is, it works in a similar way to many mobile banking apps which generate a transaction code. British Airways is supporting Google Authenticator, Microsoft Authenticator and an independent one.

After downloading your choice of authenticator app, you use the camera on your phone (if using a desktop) to scan a QR code that ba.com shows on screen. The authenticator app will then generate a random number which you type into the website.

This seems to be a one-off requirement, but we will see.

No mobile phone? The comments below suggest that desktop authenticators are also available.

The website is fully back for earn and burn

The good news is that the website is back to the, admittedly limited, functionality it had before it went down in February 2023.

To be honest, I can’t tell if my statement is correct or not. Paid flights to Iceland and Sweden from earlier this year show. A couple of flights booked for me by third parties are not there but it is possible that the booker in those cases could override the OB number I put in with their own.

It seems that an On Business redemption I cancelled last year has not been recredited, but I need to look into this more closely.

Online booking for reward flights appears to be working OK.

What is very weird is a tab called ‘Statements archive’. This shows all of my transactions from 2012 to 2014, but nothing from 2015 onwards!

Points expiry is set at 31st December 2024

On Business points expire after three years, with no way of extending them. Expiry was suspended during the time that the website was down but you will see that you have a lot of points expiring on 31st December 2024.

It remains to be seen if British Airways will give a further extension here. Given that it is now late June, giving people just six months to redeem seems tight. Let’s see.

Anyway …. reset your password, download an authenticator app, log in and have a look around.


How to earn Avios from UK credit cards

How to earn Avios from UK credit cards (April 2025)

As a reminder, there are various ways of earning Avios points from UK credit cards.  Many cards also have generous sign-up bonuses!

In February 2022, Barclaycard launched two exciting new Barclaycard Avios Mastercard cards with a bonus of up to 25,000 Avios. You can apply here.

You qualify for the bonus on these cards even if you have a British Airways American Express card:

Barclaycard Avios Plus card

Barclaycard Avios Plus Mastercard

Get 25,000 Avios for signing up and an upgrade voucher at £10,000 Read our full review

Barclaycard Avios card

Barclaycard Avios Mastercard

Get 5,000 Avios for signing up and an upgrade voucher at £20,000 Read our full review

There are two official British Airways American Express cards with attractive sign-up bonuses:

British Airways American Express Premium Plus

30,000 Avios and the famous annual 2-4-1 voucher Read our full review

British Airways American Express

5,000 Avios for signing up and an Economy 2-4-1 voucher for spending £15,000 Read our full review

You can also get generous sign-up bonuses by applying for American Express cards which earn Membership Rewards points. These points convert at 1:1 into Avios.

American Express Preferred Rewards Gold

Your best beginner’s card – 30,000 points, FREE for a year & four airport lounge passes Read our full review

The Platinum Card from American Express

80,000 bonus points and great travel benefits – for a large fee Read our full review

Run your own business?

We recommend Capital on Tap for limited companies. You earn 1 Avios per £1 which is impressive for a Visa card, and the standard card is FREE. Capital on Tap cards also have no FX fees.

Capital on Tap Visa

NO annual fee, NO FX fees and points worth 1 Avios per £1 Read our full review

Capital on Tap Pro Visa

10,500 points (=10,500 Avios) plus good benefits Read our full review

There is also a British Airways American Express card for small businesses:

British Airways American Express Accelerating Business

30,000 Avios sign-up bonus – plus annual bonuses of up to 30,000 Avios Read our full review

There are also generous bonuses on the two American Express Business cards, with the points converting at 1:1 into Avios. These cards are open to sole traders as well as limited companies.

American Express Business Platinum

50,000 points when you sign-up and an annual £200 Amex Travel credit Read our full review

American Express Business Gold

20,000 points sign-up bonus and FREE for a year Read our full review

Click here to read our detailed summary of all UK credit cards which earn Avios. This includes both personal and small business cards.

Comments (43)

This article is closed to new comments. Feel free to ask your question in the HfP forums.

  • N says:

    There’s more to this than is being said… Go on Rob, spill the beans!

    • Roy says:

      I think it’s almost certain that there was some very major part of what was on the failed system(s) that they had no backup of.

      I can’t see any other plausible reason why (a) it would take so long and (b) everyone who knows anything about what happened is sworn to secrecy.

      If anyone has another hypothesis that fits better, I’d love to hear it.

  • Paul says:

    There is more chance of me getting 2 F seats to Sydney on any chosen date than of Rishi winning this election.🤣

  • TooPoorToBeHere says:

    They lost the data didn’t they. Fired all the people who knew how it worked, let the backups rot/fail, then had a disaster and found all the data and skills were lost.

  • Chris says:

    Anyone had any luck with reset my password? I’ve not had an email after trying.

  • sayling says:

    Loving the URL for this article 👏 🤣

    • Rob says:

      It’s only because I started drafting the article, trashed it when it seemed that the site was down again, and when it started working again I recovered what I’d written. I assumed the URL would automatically adjust but it didn’t.

  • Lady London says:

    Not sure why they’ve got the cheek to deny access to members that might need to use
    a computer, nor why also the cheek to insist on some mobile authenticator app being also added to anyone’s mobile phone just for this.

    After their stupidity over VAT this all just feels like bullying. I used to use On Business, but stopped using it some time ago and glad I’ve no longer got an investment in it.

    • PeteM says:

      I think everyone should very seriously consider using a password manager and 2FA via an authenticator where available.

      • Alan says:

        Totally agree, PeteM – all sites should offer proper TOTP 2FA, not the weaker SMS one and lots of desktop options available.

    • jj says:

      Desktop authenticator apps are available for people without a mobile phone. The technology is largely standardised, so should work with this site.

    • S says:

      It’s not cheeky, its a positive security step. Authenticator apps are now extremely common outside of consumer software. Since this is an ‘on business’ site many users will already have one installed.

      • Lady London says:

        …and many won’t, and would have no other reason to install one.

        As in…. all tbe existing 2FA that’a forced on us is pretty laughable. The main question seems to be ” did I steal the person’s wallet as well as the phone ” etc. Answer Yes and you’ll have enough info, one way or another, to beat 2FA.

  • VinZ says:

    Just got the email! Yay!!!!

  • lcylocal says:

    To note for those who use the iPhone/iPad/Mac password manager in Safari, it has a built in authenticator, meaning a seperate app shouldn’t be needed (I don’t have an OnBusiness account to test it, but every other website that use Google/Microsoft Authenticator it works with).

This article is closed to new comments. Feel free to ask your question in the HfP forums.

The UK's biggest frequent flyer website uses cookies, which you can block via your browser settings. Continuing implies your consent to this policy. Our privacy policy is here.